Reset Password, but don’t allow Username, only Email

Okay, this has been driving me batty.

So that the password recovery isn’t spammed by someone to some random member, HOW can you prevent (stop, halt, not allow, etc.) Reset Password with username, and the person requesting to reset password for account can ONLY use their Email address?

I’ve hit a wall, considered core hacking if need be — I don’t care — I really need some guidance, an answer, a suggestion, a hack, a snippet of code that goes in the functions.php — ANYTHING.

I already am using a plugin that works for admin account, kindah (it just doesn’t allow admin account to request reset password)…

What I really really really am seeking? An answer to ONLY allowing emails to request a password reset. No username, no name, no nickname, no nothing else, just an email address to reset password.

Sorry, as you can see in this post, I am a desperate, extremely frustrated… . Hours of searching, trying different things and nothing works to prevent username.

Thanks for any, ANY advise, guidance, code, functions.php snippet, revelation, prayers, chants, magick, ANYthing at this moment to find an answer.